Just expressing the business requirements in a way that can be implemented as software code, with all the edge cases and exceptions covered is the really difficult part.